Vulnerabilities > Roseonlinecms

DATE CVE VULNERABILITY TITLE RISK
2010-01-06 CVE-2009-4581 Path Traversal vulnerability in Roseonlinecms
Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the admin parameter.
network
low complexity
roseonlinecms CWE-22
critical
9.8